# CVEs published 2008-05-29

22 CVEs were published on May 29, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2501](https://cve.now/CVE-2008-2501.md): Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) album… (no CVSS)
- [CVE-2008-2502](https://cve.now/CVE-2008-2502.md): Unspecified vulnerability in the web server in eMule X-Ray before 1.4 allows remote attackers to trigger memory corruption via unknown… (no CVSS)
- [CVE-2008-2503](https://cve.now/CVE-2008-2503.md): Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack vectors. (no CVSS)
- [CVE-2008-2504](https://cve.now/CVE-2008-2504.md): Multiple SQL injection vulnerabilities in Simpel Side Netbutik 1 through 4 allow remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2008-2505](https://cve.now/CVE-2008-2505.md): Cross-site scripting (XSS) vulnerability in result.php in Simpel Side Weblosning 1 through 4 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2008-2506](https://cve.now/CVE-2008-2506.md): Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2008-2507](https://cve.now/CVE-2008-2507.md): Cross-site scripting (XSS) vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote attackers to inject… (no CVSS)
- [CVE-2008-2508](https://cve.now/CVE-2008-2508.md): Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2008-2509](https://cve.now/CVE-2008-2509.md): SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter. (no CVSS)
- [CVE-2008-2510](https://cve.now/CVE-2008-2510.md): SQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-0891](https://cve.now/CVE-2008-0891.md): Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause… (no CVSS)
- [CVE-2008-0955](https://cve.now/CVE-2008-0955.md): Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute… (no CVSS)
- [CVE-2008-0958](https://cve.now/CVE-2008-0958.md): Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll… (no CVSS)
- [CVE-2008-0959](https://cve.now/CVE-2008-0959.md): Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in… (no CVSS)
- [CVE-2008-1105](https://cve.now/CVE-2008-1105.md): Heap-based buffer overflow in the receive\_smb\_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute… (no CVSS)
- [CVE-2008-1672](https://cve.now/CVE-2008-1672.md): OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key… (no CVSS)
- [CVE-2008-2054](https://cve.now/CVE-2008-2054.md): Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a… (no CVSS)
- [CVE-2008-2137](https://cve.now/CVE-2008-2137.md): The (1) sparc\_mmap\_check function in arch/sparc/kernel/sys\_sparc.c and the (2) sparc64\_mmap\_check function in… (no CVSS)
- [CVE-2008-2157](https://cve.now/CVE-2008-2157.md): robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an… (no CVSS)
- [CVE-2008-2158](https://cve.now/CVE-2008-2158.md): Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow… (no CVSS)
- [CVE-2008-2499](https://cve.now/CVE-2008-2499.md): Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and… (no CVSS)
- [CVE-2008-2500](https://cve.now/CVE-2008-2500.md): Cross-site scripting (XSS) vulnerability in the MOStlyContent Editor (MOStlyCE) component before 3.0 for Mambo allows remote attackers to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-05-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.